Socket GitHub App

Reported Context (1)

trojanized front-end assets shipped inside packages, before they reach developer environments. The Socket GitHub App scans pull request dependency changes and flags injected or obfuscated code before merge. The Socket 13 Malicious Packagist Themes Deliver iOS Spyware and Steal Crypto Wallet Seeds

CVE (3)

People (1)

MITRE ATT&CK (13)

Vendors (2)

Products (14)

Tools (5)

Industries (2)

Countries (3)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.